Content-Security-Policy: connect-src 'self' http://localhost:3001 https://*.s3.amazonaws.com https://*.storage.googleapis.com https://api.segment.io https://checkout.stripe.com https://js.stripe.com https://app.getsentry.com https://*.ingest.us.sentry.io https://*.sentry.io https://www.facebook.com https://www.google-analytics.com https://*.frontapp.com https://*.pusher.com https://*.ably-realtime.com https://*.ably.io wss://*.ably.io https://*.bugsnag.com https://*.browser-intake-datadoghq.com https://*.segment.com https://*.doubleclick.net https://homedepot.dam.aprimo.com https://www.dropbox.com https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io https://*.revjet.com/ https://*.imagekit.io https://cdn.pendo.io https://data.pendo.io https://app.pendo.io https://demo-vantage-apis.azure-api.net https://stg-in.gotvantage.com d3gfsx6v72ycp6.cloudfront.net/; default-src 'self'; worker-src 'self' blob:; frame-src 'self' https://www.youtube.com https://www.facebook.com https://checkout.stripe.com https://js.stripe.com https://*.revjet.com/ https://app.pendo.io https://portal.pendo.io https://players.brightcove.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://checkout.stripe.com https://js.stripe.com https://connect.facebook.net https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.segment.com wss://*.hotjar.com https://cdn.ravenjs.com https://assets.customer.io https://*.frontapp.com https://*.pusher.com https://*.hotjar.com https://*.hotjar.io https://*.revjet.com https://cdn.gotvantage.com https://cdn.pendo.io https://data.pendo.io https://app.pendo.io https://pendo-static-6310543174205440.storage.googleapis.com d3gfsx6v72ycp6.cloudfront.net/; media-src *; font-src 'self' data: https://fonts.gstatic.com https://*.cloudfront.net https://*.storage.googleapis.com https://*.frontapp.com https://*.azurefd.net https://cdn.gotvantage.com https://cdn.pendo.io d3gfsx6v72ycp6.cloudfront.net/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.cloudfront.net https://*.storage.googleapis.com blob: https://cdn.gotvantage.com https://app.pendo.io https://cdn.pendo.io d3gfsx6v72ycp6.cloudfront.net/; img-src * data:; report-uri https://sentry.io/api/32849/csp-report/?sentry_key=e4c3ef5397184cf3b65ed5d3c480a93c